sessions

Summary

There were new features important for compatibility with some of the upcoming cookie security changes with google that required a new Partitioned attribute be added to the cookies, this attribute was only available in go 1.23, which has just recently been released.

If you require a version that is backward compatible with a lower version than go 1.23 then you'll need to use release v1.3.0.

The following notes show the difference between 1.2.2 and the current version because 1.3.0 was a hotfix for go 1.22 and below.

What's Changed

• Improve File System Path Handling by @moloch-- in https://github.com/gorilla/sessions/pull/274
• #272: feat: Add support for paritioned attribute in cookies as per chrome 3rd party cookie phaseout by @kashishbehl in https://github.com/gorilla/sessions/pull/273
• fix no default samesite by @bharat-rajani in https://github.com/gorilla/sessions/pull/276
• Fix gorillatoolkit link in README.md by @mbacalan in https://github.com/gorilla/sessions/pull/278
• Add mysql store to the readme by @danielepintore in https://github.com/gorilla/sessions/pull/279

New Contributors

• @moloch-- made their first contribution in https://github.com/gorilla/sessions/pull/274
• @kashishbehl made their first contribution in https://github.com/gorilla/sessions/pull/273
• @bharat-rajani made their first contribution in https://github.com/gorilla/sessions/pull/276
• @mbacalan made their first contribution in https://github.com/gorilla/sessions/pull/278
• @danielepintore made their first contribution in https://github.com/gorilla/sessions/pull/279

Full Changelog: https://github.com/gorilla/sessions/compare/v1.2.2...v1.4.0

The maintainers of this repo merged a PR into main with the net/http.Cookie field Partitioned which is a field only available in go 1.23. As a result all usage of the main branch will not work unless users are on 1.23 which at the time of writing is currently unreleased. This broke the install for a number of users so the intent of this release is to push out a couple of features and bugfixes with the go 1.23 specific changes removed.

Releases should be used exclusively until go 1.23 is released.

What's Changed

• Improve File System Path Handling by @moloch-- in https://github.com/gorilla/sessions/pull/274
• #272: feat: Add support for paritioned attribute in cookies as per chrome 3rd party cookie phaseout by @kashishbehl in https://github.com/gorilla/sessions/pull/273
• fix no default samesite by @bharat-rajani in https://github.com/gorilla/sessions/pull/276
• Fix gorillatoolkit link in README.md by @mbacalan in https://github.com/gorilla/sessions/pull/278

New Contributors

• @moloch-- made their first contribution in https://github.com/gorilla/sessions/pull/274
• @kashishbehl made their first contribution in https://github.com/gorilla/sessions/pull/273
• @bharat-rajani made their first contribution in https://github.com/gorilla/sessions/pull/276
• @mbacalan made their first contribution in https://github.com/gorilla/sessions/pull/278

Full Changelog: https://github.com/gorilla/sessions/compare/v1.2.2...v1.3.0

What's Changed

• build: use build matrix; drop Go <= 1.10 by @elithrar in https://github.com/gorilla/sessions/pull/230
• refactor: use base32 encoder with no padding by @leungyauming in https://github.com/gorilla/sessions/pull/240
• docs: Add new TiKV store to README by @ryicoh in https://github.com/gorilla/sessions/pull/245
• Fix linting errors for go1.17 by @mariusor in https://github.com/gorilla/sessions/pull/253
• Update README.md by @coreydaley in https://github.com/gorilla/sessions/pull/261
• Update go version, add tools for verification and testing by @coreydaley in https://github.com/gorilla/sessions/pull/263
• Update LICENSE by @coreydaley in https://github.com/gorilla/sessions/pull/264
• Add gorilla logo to Readme by @apoorvajagtap in https://github.com/gorilla/sessions/pull/265
• Update issues.yml by @coreydaley in https://github.com/gorilla/sessions/pull/266
• Don't propagate "not exist" error if trying to erase a session matchi… by @mariusor in https://github.com/gorilla/sessions/pull/252
• update GitHub workflows by @coreydaley in https://github.com/gorilla/sessions/pull/268
• bump deps and add vendor dir by @coreydaley in https://github.com/gorilla/sessions/pull/269

New Contributors

• @leungyauming made their first contribution in https://github.com/gorilla/sessions/pull/240
• @ryicoh made their first contribution in https://github.com/gorilla/sessions/pull/245
• @mariusor made their first contribution in https://github.com/gorilla/sessions/pull/253
• @coreydaley made their first contribution in https://github.com/gorilla/sessions/pull/261
• @apoorvajagtap made their first contribution in https://github.com/gorilla/sessions/pull/265

Full Changelog: https://github.com/gorilla/sessions/compare/v1.2.1...v1.2.2

What's Changed

• build: use build matrix; drop Go <= 1.10 by @elithrar in https://github.com/gorilla/sessions/pull/230
• refactor: use base32 encoder with no padding by @leungyauming in https://github.com/gorilla/sessions/pull/240
• docs: Add new TiKV store to README by @ryicoh in https://github.com/gorilla/sessions/pull/245
• Fix linting errors for go1.17 by @mariusor in https://github.com/gorilla/sessions/pull/253
• Update README.md by @coreydaley in https://github.com/gorilla/sessions/pull/261
• Update go version, add tools for verification and testing by @coreydaley in https://github.com/gorilla/sessions/pull/263
• Update LICENSE by @coreydaley in https://github.com/gorilla/sessions/pull/264
• Add gorilla logo to Readme by @apoorvajagtap in https://github.com/gorilla/sessions/pull/265
• Update issues.yml by @coreydaley in https://github.com/gorilla/sessions/pull/266
• Don't propagate "not exist" error if trying to erase a session matchi… by @mariusor in https://github.com/gorilla/sessions/pull/252
• update GitHub workflows by @coreydaley in https://github.com/gorilla/sessions/pull/268

New Contributors

• @leungyauming made their first contribution in https://github.com/gorilla/sessions/pull/240
• @ryicoh made their first contribution in https://github.com/gorilla/sessions/pull/245
• @mariusor made their first contribution in https://github.com/gorilla/sessions/pull/253
• @coreydaley made their first contribution in https://github.com/gorilla/sessions/pull/261
• @apoorvajagtap made their first contribution in https://github.com/gorilla/sessions/pull/265

Full Changelog: https://github.com/gorilla/sessions/compare/v1.2.1...v2.0

Versioning v1.1.1 to correctly comply with SemVer.

CHANGELOG
03b6f63 Add AUTHORS file; update LICENSE (#158)
9ee0d62 [build] Update deps to correct SemVer tags (#153)
a2f2a3d replacing travis badge with scaling svg (#147)
92b749d Add link to XORM store implementation (#149)
7910f5b Added description about Max-Age field in Options (#148)
7087b4d Add go.mod file for vgo dependency management. (#145)
6ba88b7 Prevent panic in NewSession function (#140)
41ee504 Add link to memstore implementation (#143)
fe21b6a Update doc.go (#127)
a3acf13 Add missing error check (#123)

• gorilla/sessions has long needed an official release (although, strict version tags were less useful prior to vendoring tools)
• This version is the last version that supports gorilla/context going forward due to the incompability between its global map of *http.Requests and Go 1.7's new http.Request.WithContext(). The shallow copy of the request changes the address, causing gorilla/context's map to point to the old request.